blackandwhitecabs.com.au Listed by lockbit3 Ransomware Group

Blackandwhitecabs.com.au was listed on the LockBit 3.0 leak site on February 15, 2023, after the ransomware group exfiltrated internal files from the Australian taxi and cab company. The disclosure indicates that customer and employee data may have been taken, though the exact volume and specific types of records remain unknown. Anyone who has used their services in Brisbane, Perth, Toowoomba, Redcliffe, Maryborough or Mandurah could be affected.

Primary Disclosure Details

The LockBit 3.0 leak site listing states that internal files were exfiltrated during a ransomware attack. It does not quantify affected records, list exact data types, or disclose ransom amounts. The message on the site taunts the company’s management over its choice of negotiator, describing the offered conditions as “very funny.” The listing was first indexed on February 15, 2023, and remains publicly accessible via ransomware.live mirrors. No official breach notification from the company has surfaced detailing the incident timeline or systems compromised.

Why This Matters for You and Your Family

When a local service provider like a taxi company suffers a breach, your personal details can end up in criminal hands. Booking a cab often requires sharing your name, phone number, pickup address, payment information, and sometimes email or frequent-traveler identifiers. If those records were taken, identity thieves can combine them with other leaks to build a profile of your movements and financial habits. For families this risk extends beyond the booking adult: children’s names, school-run addresses, or shared family accounts can also appear in the same datasets.

Internal files taken in ransomware incidents frequently contain spreadsheets of past bookings, driver contact lists, and accounting records. Even without a precise victim count, the exposure creates long-term privacy and fraud risks for ordinary customers who simply needed a ride.

Doxxing and Identity-Chain Implications

Ransomware operators rarely stop at publishing a single file dump. They often slice the stolen data and sell or trade portions on underground forums, allowing multiple threat actors to exploit the same breach. A phone number tied to a Blackandwhitecabs booking can be cross-referenced with gaming accounts, social-media handles, or breached shopping sites. This creates an identity chain that leads directly back to your home address and family members. Credential leaks of this nature frequently cascade into account takeovers on unrelated services where the same password or email was reused.

Children’s gaming accounts are especially vulnerable because they often share family email addresses or phone numbers used for taxi bookings. A single exposed record can therefore place both adult identity and younger household members at risk of doxxing, harassment, or social-engineering attacks.

LockBit 3.0 Track Record

Public reporting attributes the LockBit ransomware group’s initial version to September 2019. It rebranded as LockBit 2.0 in 2021 and released LockBit 3.0 in early 2022. The gang has targeted organizations across healthcare, education, logistics, and local government, including several Australian entities. Their typical playbook involves initial access through phishing, remote-desktop brute force, or exploited vulnerabilities, followed by rapid exfiltration of sensitive files before encryption. LockBit operators then publish samples on their leak site and pressure victims with countdown timers and threats to release more data. They also recruit affiliates who handle day-to-day intrusions while the core team manages the brand and payment infrastructure.

What to do

• Rotate any password you have reused at blackandwhitecabs.com.au or related booking portals and enable 2FA through an authenticator app rather than SMS.
• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is flagged within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let DoxxScan remediation specialists manage takedown requests for any exposed personal records appearing on data-broker or extortion sites.

The incident underscores how even routine local transactions can feed larger criminal data ecosystems. Staying ahead requires more than changing one password. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach has opened.